audit-all

The skill’s stated purpose matches its behavior, but it enables broad fleet-wide security operations through opaque local scripts and likely remote host access. This is better classified as high-impact administrative/security tooling rather than malware; risk comes from scope, autonomy, and unverifiable downstream script behavior.